Jump to content

100% CPU-load when starting a torrent


yohanni

Recommended Posts

Hi guys.

I've read as many threads as I can but haven't figured out my problem yet.

As soon as I press "Start" the CPU-load hits the roof and everything lags.

If I hit the stop button, it's back to normal.

I'm using µTorrent 1.8.1 and here are the following logs:

HiJackThis v2.0.2:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:17:03, on 2008-11-07
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program\UltraMon\UltraMon.exe
C:\Program\D-Tools\daemon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program\Java\jre1.6.0_07\bin\jusched.exe
C:\Program\UltraMon\UltraMonTaskbar.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Windows Live\Messenger\MsnMsgr.Exe
C:\Program\Messenger\msmsgs.exe
E:\spel\steam\steam.exe
C:\Program\uTorrent\utorrent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [ATIPTA] C:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [egui] "C:\Program\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [UltraMon] "C:\Program\UltraMon\UltraMon.exe" /auto
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "e:\spel\steam\steam.exe" -silent
O4 - HKCU\..\Run: [uTorrent] "C:\Program\uTorrent\utorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://G:\Program\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\Program\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program\Delade filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program\Bonjour\mDNSResponder.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program\Delade filer\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

--
End of file - 4788 bytes

And here's the Process Explorer info, if I got that right:

Process    PID    CPU    Description    Company Name
System Idle Process 0 98.46
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
smss.exe 904 Sessionshanteraren i Windows NT Microsoft Corporation
csrss.exe 976 Client Server Runtime Process Microsoft Corporation
winlogon.exe 1052 Inloggningsprogram för Windows NT Microsoft Corporation
services.exe 1096 Tjänst- och styrenhetsprogram Microsoft Corporation
ati2evxx.exe 1268 ATI External Event Utility EXE Module ATI Technologies Inc.
svchost.exe 1288 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1420 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1724 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1848 Generic Host Process for Win32 Services Microsoft Corporation
spoolsv.exe 296 Spooler SubSystem App Microsoft Corporation
mDNSResponder.exe 640 Bonjour Service Apple Computer, Inc.
PSIService.exe 896 nTitles PSIService
alg.exe 964 Application Layer Gateway Service Microsoft Corporation
svchost.exe 2620 Generic Host Process for Win32 Services Microsoft Corporation
usnsvc.exe 3316 Messenger Sharing USN Journal Reader Service Microsoft Corporation
ekrn.exe 3916 Eset Service ESET
lsass.exe 1108 LSA Shell (Export Version) Microsoft Corporation
ati2evxx.exe 1772 ATI External Event Utility EXE Module ATI Technologies Inc.
explorer.exe 508 Utforskaren Microsoft Corporation
egui.exe 812 Eset GUI ESET
UltraMon.exe 884 UltraMon Realtime Soft
UltraMonTaskbar.exe 1488 UltraMon Taskbar Realtime Soft
daemon.exe 1500 Virtual DAEMON Manager DAEMON'S HOME
SOUNDMAN.EXE 756 Realtek Sound Manager Realtek Semiconductor Corp.
jusched.exe 732 Java(TM) Platform SE binary Sun Microsystems, Inc.
ctfmon.exe 700 CTF Loader Microsoft Corporation
msnmsgr.exe 616 Windows Live Messenger Microsoft Corporation
msmsgs.exe 1672 Windows Messenger Microsoft Corporation
steam.exe 1556 Steam Valve Corporation
utorrent.exe 332 1.54 µTorrent BitTorrent, Inc.
taskmgr.exe 3864 Aktivitetshanteraren Microsoft Corporation
firefox.exe 940 Firefox Mozilla Corporation
HiJackThis.exe 2552 HijackThis Trend Micro Inc.
notepad.exe 348 Anteckningar Microsoft Corporation
foobar2000.exe 2860 foobar2000 Application
LastFM.exe 2484 Last.fm Last.fm
procexp.exe 2292 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

Process: utorrent.exe Pid: 332

Name Description Company Name Version
ACTIVEDS.dll DLL-fil för Active Directory Router Layer Microsoft Corporation 5.01.2600.5512
adsldpc.dll ADs LDAP-provider C DLL Microsoft Corporation 5.01.2600.5512
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.5512
ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0001
CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0700
COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.5512
comdlg32.dll DLL-fil med vanliga dialogrutor Microsoft Corporation 6.00.2900.5512
COMRes.dll Microsoft Corporation 2001.12.4414.0700
credui.dll Användargränssnitt för referenshanteraren Microsoft Corporation 5.01.2600.5512
CRYPT32.dll 32-bitars kryptografi-API Microsoft Corporation 5.131.2600.5512
ctype.nls
DnsApi.dll DNS Client API DLL Microsoft Corporation 5.01.2600.5625
dot3api.dll API-funktioner för automatisk konfiguration av 802.3 Microsoft Corporation 5.01.2600.5512
dot3dlg.dll Hjälpprogram för användargränssnittet för 802.3 Microsoft Corporation 5.01.2600.5512
eappcfg.dll EAP-peerkonfig Microsoft Corporation 5.01.2600.5512
eappprxy.dll Microsoft EAPHost Peer Client DLL Microsoft Corporation 5.01.2600.5512
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.5512
hnetcfg.dll Hanteraren för konfiguration av hemnätverk Microsoft Corporation 5.01.2600.5512
Iphlpapi.dll API för IP Helper Microsoft Corporation 5.01.2600.5512
kernel32.dll Klient-DLL för Windows NT BASE API Microsoft Corporation 5.01.2600.5512
locale.nls
mdnsNSP.dll Bonjour Namespace Provider Apple Computer, Inc. 1.00.0003.0001
MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.5512
MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.5512
MSCTF.dll DLL-fil för MSCTF-servern Microsoft Corporation 5.01.2600.5512
msi.dll Windows Installer Microsoft Corporation 3.01.4001.5512
MSVCP60.dll Microsoft (R) C++ Runtime Library Microsoft Corporation 6.02.3104.0000
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.5512
mswsock.dll Tjänstprovider för Microsoft Windows Sockets 2.0 Microsoft Corporation 5.01.2600.5625
netapi32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.5694
netshell.dll Användargränssnitt för nätverksanslutning Microsoft Corporation 5.01.2600.5512
ntdll.dll DLL-fil för NT Layer Microsoft Corporation 5.01.2600.5512
ole32.dll Microsoft OLE för Windows Microsoft Corporation 5.01.2600.5512
oleaut32.dll Microsoft Corporation 5.01.2600.5512
OneX.DLL IEEE 802.1X supplicant library Microsoft Corporation 5.01.2600.5512
rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.5512
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.5512
rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.01.2600.5507
RTSUltraMonHook.dll Hook DLL for Realtime Soft UltraMon Realtime Soft 2.07.0001.0000
RTSUltraMonHookRes.dll UltraMon Resource DLL Realtime Soft 2.06.0023.0003
rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.5512
SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.5512
Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.5512
SETUPAPI.dll API för installationsprogrammet för Windows Microsoft Corporation 5.01.2600.5512
SHELL32.dll DLL-fil för Windows-gränssnittet Microsoft Corporation 6.00.2900.5512
shfolder.dll Shell Folder Service Microsoft Corporation 6.00.2900.5512
SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.5512
sortkey.nls
sorttbls.nls
SXS.DLL Fusion 2.5 Microsoft Corporation 5.01.2600.5512
unicode.nls
USER32.dll Klient-DLL-fil för Windows XP Microsoft Corporation 5.01.2600.5512
USERENV.dll Userenv Microsoft Corporation 5.01.2600.5512
utorrent.exe µTorrent BitTorrent, Inc. 1.08.0001.12639
UxTheme.dll Bibliotek för Microsoft UxTheme Microsoft Corporation 6.00.2900.5512
VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.5512
WINSTA.dll Winstation Library Microsoft Corporation 5.01.2600.5512
WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.5512
WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.5512
WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.5512
wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.5512
WTSAPI32.dll Windows Terminal Server SDK APIs Microsoft Corporation 5.01.2600.5512
xpsp2res.dll Service Pack 2-meddelanden Microsoft Corporation 5.01.2600.5512

Really appreciate it guys, thanks!

Link to comment
Share on other sites

Hmm, this is strange.

When I start downloading taskmanager shows that all cpu-usage goes to firefox?

Why is that?

The torrent checks the data about 0.1% a second, reaaaally slow. Any ideas?

By the way, thank you for trying to help thelittlefire.

------

Now when starting on a another torrent, "Disc Overload 100%" shows up and the cpu is still 100%.

Any ideas guys?

Appreciate your time.

Link to comment
Share on other sites

And these DLL injected in uT, not very good...

RTSUltraMonHook.dll    Hook DLL for Realtime Soft UltraMon    Realtime Soft    2.07.0001.0000
RTSUltraMonHookRes.dll UltraMon Resource DLL Realtime Soft 2.06.0023.0003

Maybe think about it in the future if uT freezes or crashes.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...